feat(media): deploy lk-jwt-service for Matrix Element Call

Bridges Element Call to LiveKit by exchanging Matrix OpenID tokens for
LiveKit JWTs. Shares API credentials with livekit-server via the
existing VSO secret (removed excludeRaw so raw fields are available).

base/media/vault-secrets.yaml

@@ -26,12 +26,13 @@ spec:
   rolloutRestartTargets:
     - kind: Deployment
       name: livekit-server
+    - kind: Deployment
+      name: lk-jwt-service
   destination:
     name: livekit-api-credentials
     create: true
     overwrite: true
     transformation:
-      excludeRaw: true
       templates:
         keys.yaml:
           text: '{{ index .Secrets "api-key" }}: {{ index .Secrets "api-secret" }}'